Privacy Policy

O Melhor Site (omelhorsite.pt and the O Melhor Site apps for iPhone and Android) is a personal service run by Afonso Coutinho, in Portugal, who is the controller of your data. This policy explains what data we process, why, who we share it with and your rights under the GDPR. It applies equally to the website and the apps.

Only what the service needs to work:

• Account: email, name, username (handle) and, if you add them, gender, country, bio and profile picture, plus the date and version of the Terms you accepted. Accounts are created at id.omelhorsite.pt.
• Sign-in and security: password (stored only as a hash), passkeys, and your open sessions with IP address, browser or device and last use.
• What you create or send: messages and groups, events and calendars, notes, files in Storage, blogs, forms, support tickets, your library, and what you type into AI features (for example an event dictated or written in plain text).
• Calls: who called whom, when and for how long. Audio and video are never recorded.
• Friends, friend requests, blocked people and who you follow.
• In the app: the device's notification token (to tell you about messages, calls and events), the app version and the operating system.
• Usage: which pages and services you open, as daily counters. For people who are not signed in we use an anonymous identifier that changes every day and cannot reveal the IP. The country comes from the IP address; the IP itself is not kept in these statistics.
• Diagnostics: server error logs and app error reports, to fix problems.
• Reports: when you report content we keep who reported, what, the reason, your note and a copy of the reported content (for an encrypted message, the text your device decrypted and sent with the report), so we can review it.

Encrypted messages are encrypted on your device with the MLS protocol (RFC 9420) and only the devices of the people in the conversation can read them: the server stores them encrypted, without the keys. The language filter for these messages runs on your device, before encryption. Calls are encrypted with DTLS-SRTP. Private notes and encrypted files use keys that stay on your device. We only use public, standard algorithms (X25519, Ed25519, AES-GCM, SHA-256).

We use data only to:

• Provide the service you ask for (performance of contract): store and show your content, deliver messages and calls, send the notifications and emails you chose.
• Security and abuse prevention (legitimate interest): protect accounts, review reports, remove content that breaks the Terms.
• Aggregate usage statistics (legitimate interest), to learn what works and what to fix.
• Answer support tickets and requests you send us.

We show no ads, sell no data, build no advertising profiles and do not track people across third-party apps or websites.

The apps ask for permission before using:

• Camera and microphone: only in calls and meetings, and when you choose to take a photo or record audio (for example to dictate an event).
• Photos: only the ones you choose to send or save.
• Notifications: to tell you about messages, calls and reminders. You choose which ones in My account.
• Stored on the device: the session token (in the iPhone Keychain or the Android Keystore), a copy of what you already opened so it works offline, and the encryption keys.

The apps do not use the advertising identifier or any third-party advertising or analytics SDK.

Most of the service runs on our own servers in Portugal (database, files, calls, search and local AI). We use these processors, sharing only the minimum needed:

• Cloudflare: delivers the website and the connection to our servers; it sees your IP address and requests, like any content delivery network.
• Brevo: sends the service's emails (confirmations, notifications you chose, tickets); it receives your email address and the message text.
• Apple (APNs): in the iPhone app, notifications go through Apple with the device token and the notification text. The Android app uses no third-party push service.
• OpenRouter and Anthropic: only when you use an AI feature, they receive the text needed for that request (for example the event you typed). We do not send them your email.
• Search engines: the site's search goes through our own server, which fetches results without sending your IP or account.

We may also disclose data where the law requires it. Apart from this we share data with no one.

We keep data while your account is active:

• If you delete your account it closes immediately and, after 48 hours (so you can change your mind), your data is deleted step by step: files, messages, calendars, sessions and everything else.
• Your own reports are deleted with your account. Reports made about you are kept, without the link to your account, as a record of moderation decisions.
• Server logs rotate within a few weeks. Usage statistics are kept only as counters.
• Backups are encrypted and kept for at most 12 months, then deleted.

Under the GDPR you can:

• Access the data we hold about you and correct it.
• Delete your account and data: on the website or in the app, in My account > Account > Delete my account.
• Ask for a copy of your data in a portable format.
• Object to processing or ask us to restrict it.
• Lodge a complaint with the Portuguese data protection authority (CNPD, cnpd.pt).

The service is not meant for anyone under 16. If you know of an account belonging to someone younger, tell us and we will delete it.

If this policy changes we update the date at the top. If the change is important we will tell you on the website, in the app or by email.

For any privacy question, including access or deletion requests, write to afonso@omelhorsite.pt or open a support ticket.